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From application.xml 

<module id="WebModule_r'> 
<web> 

<web-uri>PBSecFVTServletl.war</web-uri> 
<context-root>/secfvt/servlets/basicauth</context-root> 
</web> 
</module> 

<module id="EibModule_4"> 

<eib>SecFVTS4UB.iar</eib> 

<alt-dd></alt-dd> 
</moduIe> 

<security-role id="Security Role_l "> 

<description>Manager in an enterprise</description> 

<role-name>Manager</ role-name> 
</security-role> 



From web.xml 

<security-constraint id="SecurityConstraint_l "> 

<web-resource-collection id="WebResourceCollection_l "> 

<web-resource-name>Protected Area</web-resource-name> 

<url-pattern>/SecFVTServletl /*</url-pattern> 

<http-method>DELETE</http-method> 

<http-method>GET</http-method> 

<http-method>POST</http-method> 

<http-method>PUT</http-method> 
</web-resource-collection> 
<auth-constraint id="AuthConstraint_l "> 

<role-name>Manager</role-name> 

<role-name>Employee</ role-name> 
</auth-constraint> 
</security-constraint> 
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From an ejb-jar.xml: 6/6 



<method-permission id="MethodPermission_l "> 

<description>Allow AllAuthenticated users to create 

SecFVTSlEJB</description> 
<role-name>AIIAuthenticated</role-name> ^ 
<method id="MethodElement_l"> g §^ rn 

<ejb-name>SecFVTSlEJB</ejb-name> ^ T g 

<method-intf>Home</method-intf> € ^ <^ 

<method-name>create</method-name> ^ 4 S 



o 
o 



<method-params> 

<method-param>java.lang.String</method-^aram> 
</method-params> 
</method> 
</method-permission> 

<enterprise-beans> 

<session id="Session_l"> 

<description>Security FVT Stateful Session Bean Test 

#l</description> 
<display-name>SecFVTSlUB</display-name> 
<small-icon></small-icon> 
<large-icon></large-icon> 
<ejb-name>SecFVTSl EJB</ejb-name> 
<home>com.ibm.ws.secfvt.jars.eib.SecFVrSlHome</home> 
<remote>com.ibm.ws.secfvt.jars.eib.SecFVTSl </ remote> 
<ejb-class>com.ibm.ws.secfvt.jars.ejb.SecFVrSlEJB</ejb-class> 
<session-type>Stateful</session-type> 
<transaction-type>Bean</transaction-type> 
<security-role-ref id="SecurityRoleRef_l "> 

<description>Used for principal verification</description> 

<role-name>Emp</role-name> 

<role-link>Employee</ role-link> 
</security-role-ref> 

<security-role-ref id="SecurityRoleRef_2"> 

<description>Used for principal verification</description> 
<role-name>Mgr</ role-name> 
<role-link>Manager</ role-link> 
</security-role-ref> 
</session> FIT 7 

</enterprise-beans> ' 



